dm cache: Fix UAF in destroy()
stable inclusion from stable-v5.10.163 commit 2b17026685a270b2beaf1cdd9857fcedd3505c7e category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I7PJ9N Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2b17026685a270b2beaf1cdd9857fcedd3505c7e ---------------------------------------------------- commit 6a459d8e upstream. Dm_cache also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in destroy(). Cc: stable@vger.kernel.org Fixes: c6b4fcba ("dm: add cache target") Signed-off-by:Luo Meng <luomeng12@huawei.com> Signed-off-by:
Mike Snitzer <snitzer@kernel.org> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by:
zhaoxiaoqiang11 <zhaoxiaoqiang11@jd.com>
Loading
Please sign in to comment